PT-2020-20335 · Samsung · Samsung Galaxy S10

Fluoroacetate · Published 2020-02-20 · Updated 2020-03-05 · CVE-2020-8860

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung Galaxy S10 Firmware versions G973FXXS3ASJA, O(8.x), P(9.0), Q(10.0)

Description This issue allows remote attackers to execute arbitrary code on affected devices. The exploitation requires user interaction, specifically answering a phone call. The flaw exists within the Call Control Setup messages due to the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, stack-based buffer. An attacker can leverage this to execute code in the context of the baseband processor.

Recommendations For Samsung Galaxy S10 Firmware version G973FXXS3ASJA, update to a version that fixes the issue with proper validation of user-supplied data length. For Samsung Galaxy S10 Firmware versions O(8.x), P(9.0), Q(10.0), ensure that all Call Control Setup messages are properly validated to prevent stack-based buffer overflow. As a temporary workaround, consider restricting or disabling the handling of Call Control Setup messages until a patch is available.

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2020-8860

ZDI-20-255

Affected Products

Samsung Galaxy S10

References · 5

• https://osv.dev/vulnerability/CVE-2020-8860 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-255 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-8860 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://t.me/cvenotify/1146 · Telegram Post